12511 Commits

Author SHA1 Message Date
Franco Fichtner
9fb0b8d677 firmware: remove compat code from plugin register script #4500
We always assume metadata is present otherwise we end up
with undefined behaviour.
2021-02-15 09:15:45 +01:00
Ad Schellevis
a58f21dc10 IPSec: fix minor validation issue, Phase2 Local/Remote network check does't apply on VTI interfaces. 2021-02-12 22:18:43 +01:00
Franco Fichtner
dd7aa5311f firmware: vim used to be more clever 2021-02-14 14:40:45 +01:00
Franco Fichtner
fd2bc705ac firmware: small design improvement and release type shift warning #4500 2021-02-14 14:31:22 +01:00
Franco Fichtner
694333657a firmware: go back to fa-spinner fa-pulse in the tab labels #4500 2021-02-14 13:57:46 +01:00
Franco Fichtner
88aa77ecda firmware: assorted changes for #4500
o Do not load the text changelog for the GUI as it is unused
o Rename product_name to product_id for consistency
o Always hint at product_target so correct changelog is displayed
o Rename type to target for consistency
o Add distinguishable labels to changelog view actions
o Return JSON when argument is given for easier debug
2021-02-14 13:50:14 +01:00
Ad Schellevis
a4f48f7a91 Services / Web proxy - possible ownership issue on template directory.
It's probably better to chown the error pages directory, just like we for other squid related directories, to prevent ownership issues. Although this doesn't seem to go wrong, the files are intended for squid.

closes https://github.com/opnsense/core/issues/4703
2021-02-12 21:11:26 +01:00
Franco Fichtner
bb0085dd77 interfaces: these look unused 2021-02-13 14:09:45 +01:00
Franco Fichtner
64640958df firmware: for check also figure out release type shift #4500 2021-02-12 21:58:05 +01:00
Franco Fichtner
65f212b537 firmware: bubble this down, more to come #4500 2021-02-12 21:41:22 +01:00
Franco Fichtner
9679c969f6 firmware: remove type.install, bring code closer together #4500 2021-02-12 19:59:48 +01:00
Franco Fichtner
10eab0ae68 firmware: get rid of firmware type name #4500
From the user side no functional changes.  What this can do
now is decide whether to update or do a release type transition.
In most cases it is safer to get all updates first and then
do a release type transition afterwards.  This can follow when
firmware type install can be shelved.
2021-02-12 19:37:58 +01:00
vnxme
f69794b929
OpenVPN: Enhance configuration - Compression (#4590) 2021-02-12 18:37:02 +01:00
Franco Fichtner
d00a9f3c16 firmware: correct install time and loop check_package #4500
The former is so we have the date of the install point, not the
date of the package build time.  And, secondly, if we loop the
argument for check through the JSON we know to put the result
into perspective later on.
2021-02-12 14:48:20 +01:00
Franco Fichtner
65625704b3 firmware: product call returns type already #4500 2021-02-12 13:00:23 +01:00
Franco Fichtner
db87488b40 firmware: remove PIPEFILE #4500 2021-02-12 12:11:38 +01:00
Franco Fichtner
5542fa450a firmware: avoid PIPEFILE if not needed #4500 2021-02-12 12:00:11 +01:00
Franco Fichtner
67e3da7600 firmware: no more PIPEFILE in security audit #4500 2021-02-12 11:54:09 +01:00
Franco Fichtner
37664543e1 firmware: extent connectivity script, add to shell #4500
We can actually get rid of PIPEFILE if we do not need the
return value of the command.  More simplification on the
way.
2021-02-12 11:53:04 +01:00
Franco Fichtner
f059f6cd59 firmware: bugs and tweaks #4500 2021-02-12 10:54:42 +01:00
Franco Fichtner
35d88e8da4 firmware: support repository info for updates #4500 2021-02-12 00:03:32 +01:00
Franco Fichtner
07738f2654 firmware: for now also add a loading indicator to status tab 2021-02-11 22:38:12 +01:00
Franco Fichtner
44029766c2 firmware: improve search UX #4500 2021-02-11 22:31:48 +01:00
Franco Fichtner
724167b44b firmware: remove cruft, show log during check #4500 2021-02-11 22:14:08 +01:00
Franco Fichtner
cc58fd6009 firmware: background the update check, funnel it back to GUI #4500 2021-02-11 20:38:34 +01:00
Ad Schellevis
d49e44ac01 System / Access / Tester : convert line end to <br/> characters, it's not very obvious that an attribute like memberof uses "\n" between entries. 2021-02-11 18:41:30 +01:00
Franco Fichtner
84b086ec96 firmware: provide check data to caller for upcoming refactor #4500 2021-02-11 16:29:28 +01:00
Franco Fichtner
d8e0eb669a firmware: remove debug output 2021-02-11 15:34:44 +01:00
Franco Fichtner
10646e04c6 system: retain index after sort; closes #4697 2021-02-11 14:27:57 +01:00
Franco Fichtner
16cfcb5713 firmware: add search for plugins and packages #4500 2021-02-11 14:21:40 +01:00
Ad Schellevis
297cc48941 Firewall / Aliases - all doesn't return all, but more like all -1. 2021-02-11 13:31:43 +01:00
Franco Fichtner
6a2c0c4e72 firmware: report enabled repositories #4500 2021-02-11 13:26:10 +01:00
Ad Schellevis
b465a418a0 IDS policies not mnatching categories. since categories isn't a metadata field, our parser seems to miss the field content. In this case it should be safe to assume if a metadata field isn't found we can look in the rule properties if it's there. there likely aren't overlapping properties in this case. closes https://github.com/opnsense/core/issues/4695 2021-02-11 11:25:17 +01:00
Franco Fichtner
a9d00046ff firmware: check status instead of using fail #4500
Also back off a little when not getting proper data.
2021-02-11 10:37:44 +01:00
Franco Fichtner
bfbc0bdccb firmware: warn on incomplete repository, change release type priority #4500 2021-02-10 16:06:49 +01:00
René
75a7e2131a
Sidebar - fix for too long a-link list (#4684) 2021-02-10 15:47:01 +01:00
Franco Fichtner
831fcec40b firmware: add a functional stub for connectivity audit #4500
pkg update -f is a good starting point, but we also need to check
DNS etc. so that is still a subject to debate.
2021-02-10 13:39:22 +01:00
Franco Fichtner
2a860c841d firmware: business changelogs from separate mirror #4500 2021-02-10 13:14:37 +01:00
Franco Fichtner
a75877fc8d firmware: support business type, production changes to community for clarity #4500 2021-02-10 11:50:08 +01:00
Maurice Walker
028b129f87
radvd: remove ::/0 route (#4692)
As discussed back in #3343: Router Advertisements should never contain a ::/0 route.
A default route is indicated by setting the Router Lifetime to > 0. This was originally fixed
by @fichtner in e67dade, but the ::/0 route is still added for CARP interfaces and "static
mode" interfaces (introduced in 66dc0e9).
2021-02-10 08:25:45 +01:00
Ad Schellevis
61e41715f0 System / Trust / Certificates : fix "PHP Warning: count(): Parameter must be an array or an object t..." closes https://github.com/opnsense/core/issues/4690 2021-02-09 10:54:30 +01:00
Ad Schellevis
f79c311abf IDS: prevent flowbits:noalert from being dropped. closes https://github.com/opnsense/core/issues/4687 2021-02-08 19:35:15 +01:00
Franco Fichtner
0c431a0f69 make: with strict tag rules it is possible to bail on missing tags 2021-02-08 19:32:25 +01:00
Franco Fichtner
f054c5e112 firmware: do not look up N/A changelog #4500 2021-02-08 14:32:06 +01:00
Franco Fichtner
91ae9bca45 firmware: tweak UX for #4500 2021-02-08 14:13:35 +01:00
Franco Fichtner
b0b0b1878a pkg: expand this logic to figure out non-devel type numbers
We could check if we are on a stable branch but the CORE_TYPE
gives us a good hint at what we are looking at here already.
2021-02-08 10:13:33 +01:00
Franco Fichtner
20835a92b1 system: disable clog by default 2021-02-08 09:41:40 +01:00
Ad Schellevis
7cd248ae85 Captive portal - refactor bootgrid usage in sessions, for https://github.com/opnsense/core/issues/4683 2021-02-07 19:43:26 +01:00
Franco Fichtner
6c797c271f pkg: reduce diff against former code 2021-02-07 19:36:49 +01:00
Ad Schellevis
7bdcc97e3c Diagnostics - refactor bootgrid usage . for https://github.com/opnsense/core/issues/4683 2021-02-07 18:30:26 +01:00